Create a pod with a gitRepo volume whose repository contains an ext:: command
kubelet runs git clone as root, executing the injected command on the node
Exfiltrate node credentials.
This is T0 on control plane nodes
Note:
The gitRepo driver is disabled by default in 1.33 and GA-locked off in 1.36, so the kubelet will not mount it.
Independently, git 2.12.1+ refuses the ext:: transport by default, blocking the classic CVE-2024-10220 PoC on any normal node regardless of version.